Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into username and password fields. Attackers can submit SQL operators like '=' 'or' in both credentials to manipulate the authentication query and gain unauthorized access to the admin panel.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-27 | 2 | Disclosure1General1 |
| 2026-03-04 | 1 | Disclosure1 |
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25494 - Homey BNB V4 SQL Injection Authentication Bypass via Admin Panel Intel Report: https://ift.tt/Pirgjhx
Post summary
An alert announces CVE-2019-25494, a SQL injection authentication bypass in Homey BNB V4 via the admin panel, and provides a link to an Intel report for further details.
CVE-2019-25494 (CVSS:8.8, HIGH) is Undergoing Analysis. Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attac..https://nvd.nist.gov/vuln/detail/CVE-2019-25494 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2019-25494, an SQL injection flaw in Homey BNB V4’s admin panel with a CVSS score of 8.8, but offers no evidence of exploitation, patches, or PoC.
CVE-2019-25494 Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL… https://www.cve.org/CVERecord?id=CVE-2019-25494
Post summary
The post announces CVE-2019-25494 as an SQL injection flaw in Homey BNB V4’s admin panel, enabling unauthenticated authentication bypass.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | doditsolutions | airbnb_clone_script | 4 | - | - |